SQL Injection

Every one of the 41 is a mark on the map. Named now: 1 to 26, most at risk first.

1. A SQL injection vulnerability in "/index.php" of Kashipara Live Membership System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the email or…CVE-2024-40486Lopalopa · CVSS 9.8 · 1.0% likely

   CWE-89

2. SQL injection vulnerability in Dynamic Lab Management System Project in PHP v.1.0 allows a remote attacker to execute arbitrary code via a crafted script.CVE-2024-22917Lopalopa · CVSS 8.6 · 0.7% likely

   CWE-89

3. A SQL injection vulnerability in "/music/ajax.php?action=login" of Kashipara Music Management System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Logi…CVE-2024-42781Lopalopa · CVSS 9.8 · 0.7% likely

   CWE-89

4. A SQL Injection vulnerability was found in /login.php in KASHIPARA E-learning Management System Project 1.0 via the username and password parameters.CVE-2024-50833Lopalopa · CVSS 3.5 · 0.6% likely

   CWE-89

5. A SQL Injection vulnerability was found in /admin/edit_student.php in KASHIPARA E-learning Management System Project 1.0 via the cys, un, ln, fn, and id parameters.CVE-2024-50835Lopalopa · CVSS 3.5 · 0.6% likely

   CWE-89

6. A SQL Injection was found in /admin/teachers.php in KASHIPARA E-learning Management System Project 1.0 via the firstname and lastname parameters.CVE-2024-50834Lopalopa · CVSS 3.5 · 0.6% likely

   CWE-89

7. A SQL Injection vulnerability was found in /admin/edit_class.php in kashipara E-learning Management System Project 1.0 via the class_name parameter.CVE-2024-50832Lopalopa · CVSS 3.5 · 0.6% likely

   CWE-89

8. A SQL injection vulnerability in "/music/controller.php?page=view_music" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "id…CVE-2024-42784Lopalopa · CVSS 9.8 · 0.6% likely

   CWE-89

9. A SQL Injection was found in /admin/delete_event.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unautho…CVE-2024-54931Lopalopa · CVSS 9.8 · 0.6% likely

   CWE-89

10. A SQL Injection was found in /remove_sent_message.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauth…CVE-2024-54925Lopalopa · CVSS 9.8 · 0.6% likely

    CWE-89

11. A SQL Injection was found in /admin/edit_content.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unautho…CVE-2024-54924Lopalopa · CVSS 9.8 · 0.6% likely

    CWE-89

12. A SQL Injection vulnerability was found in /admin/edit_teacher.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands…CVE-2024-54923Lopalopa · CVSS 9.8 · 0.6% likely

    CWE-89

13. A SQL Injection was found in /student_signup.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorize…CVE-2024-54921Lopalopa · CVSS 9.8 · 0.6% likely

    CWE-89

14. A SQL Injection vulnerability was found in /teacher_signup.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL command to ge…CVE-2024-54920Lopalopa · CVSS 9.8 · 0.6% likely

    CWE-89

15. A SQL injection vulnerability in /smsa/teacher_login.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "userna…CVE-2024-41237Lopalopa · CVSS 9.8 · 0.6% likely

    CWE-89

16. A SQL Injection vulnerability was found in /search_class.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get…CVE-2024-54926Lopalopa · CVSS 9.8 · 0.6% likely

    CWE-89

17. A SQL Injection was found in /admin/edit_user.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthoriz…CVE-2024-54922Lopalopa · CVSS 9.8 · 0.6% likely

    CWE-89

18. A SQL injection vulnerability in "/music/view_user.php" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "id" parameter of Vi…CVE-2024-42786Lopalopa · CVSS 8.8 · 0.6% likely

    CWE-89

19. A SQL injection vulnerability in /music/index.php?page=view_playlist in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "id" pa…CVE-2024-42785Lopalopa · CVSS 7.6 · 0.5% likely

    CWE-89

20. A SQL Injection vulnerability was found in /admin/login.php in kashipara E-learning Management System Project 1.0 via the username and password parameters.CVE-2024-50823Lopalopa · CVSS 3.5 · 0.5% likely

    CWE-89

21. Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_class.php.CVE-2024-54934Lopalopa · CVSS 9.8 · 0.5% likely

    CWE-89

22. Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_department.php.CVE-2024-54932Lopalopa · CVSS 9.8 · 0.5% likely

    CWE-89

23. KASHIPARA E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_subject.php.CVE-2024-54929Lopalopa · CVSS 7.2 · 0.5% likely

    CWE-89

24. A SQL Injection vulnerability was found in /admin/class.php in kashipara E-learning Management System Project 1.0 via the class_name parameter.CVE-2024-50824Lopalopa · CVSS 3.5 · 0.5% likely

    CWE-89

25. Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_content.php.CVE-2024-54933Lopalopa · CVSS 9.8 · 0.5% likely

    CWE-89

26. Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/delete_student.php.CVE-2024-54930Lopalopa · CVSS 9.8 · 0.5% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.